home

cdn.hosting-stats.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain cdn.hosting-stats.com is registered by proxy through ENOM, INC. and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US East (Northern Virginia) region datacenter.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Monday, July 22, 2013

Expires date:
Saturday, July 22, 2017

Updated date:
Tuesday, July 19, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
hosting-stats.com

Whois:
1 hosting-stats.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!B2B87E43A315
100.00%

Norman
Downloader
100.00%

Trend Micro House Call
TROJ_GEN.R0CBH06GE14
100.00%

AegisLab AV Signature
Troj.Downloader.W32.Gen
100.00%

Dr.Web
Adware.Downware.3968
100.00%

Fortinet FortiGate
W32/Downloader_x.KD!tr
100.00%

Qihoo 360 Security
Win32/Trojan.Dropper.c9f
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

Clam AntiVirus
Win.Adware.Outbrowse-1197
100.00%

The domain cdn.hosting-stats.com has been seen to resolve to the following IP address.

54.231.73.25
s3-website-us-east-1.amazonaws.com
July 19, 2016

File downloads found at URLs served by cdn.hosting-stats.com.

9 / 68      (PUP)
http://cdn.hosting-stats.com/.../setup.exe  (b2b87e43a315ea1eb91ce837b1f01546)

The following 31 files have been seen to comunicate with cdn.hosting-stats.com in live environments.

TCP » 54.231.73.25:80
40db1533-f551-4998-8bca-934da85073e3-6.exe (CinemaP-1.9cV09.11 by Cinema PlusV09.11)

TCP » 54.231.73.25:80
disco_games_notification_service.exe (FileProperties_ProductName by FileProperties_CompanyName)

TCP » 54.231.73.25:80
uninstallbrw.exe (CinemaPlus-3.2cV07.05 by Cinema PlusV07.05)

TCP » 54.231.73.25:80
b4f790d0-343b-4585-8908-50f85960941e-3.exe (MyBrowser 1.0.2V14.10)

TCP » 54.231.73.25:80
unicobrowser.exe (Unico Browser by The Unico Browser Authors)

TCP » 54.231.73.25:80
a98c0e9f-379b-4919-9b84-710708043538-5.exe (CinemaP-1.9cV09.10 by Cinema PlusV09.10)

TCP » 54.231.73.25:80
506a739b-12de-484f-b322-e47a2073478e-1-7.exe (Ge-Force by Webar)

TCP » 54.231.73.25:80
disco_games_updating_service.exe

TCP » 54.231.73.25:80
70a2752d-b031-4a7d-876e-4d8db72c14e5-1-7.exe (CinemaP-1.9cV02.11 by Cinema PlusV02.11)

TCP » 54.231.73.25:80
1c485186-b776-418e-8fbe-02d7a1f26cf4-1-6.exe (App Lid by Lid)

TCP » 54.231.73.25:80
e01b77cb-491f-41f0-9cec-93cd04c2654b-7.exe (SensePlus by Sense+)

TCP » 54.231.73.25:80
uninstallbrw.exe (CinemaPlus-4.2vV29.09 by Cinema PlusV29.09)

TCP » 54.231.73.25:80
e1475daf-b761-405b-8f3a-68653e38d92e-6.exe (SavePass 1.1 by OB)

TCP » 54.231.73.25:80
81090ca9-980d-4c76-a917-62fc7271e058-6.exe (Sense by Object Browser)

TCP » 54.231.73.25:80
1c895bea-87f1-49b9-8fef-94dd222ff36f-10.exe (Cinema Plus v6V23.07)

TCP » 54.231.73.25:80
2a253353-4571-4e45-91ad-22e821d902a4-1-7.exe (MyBrowser 1.0.2V22.09)

TCP » 54.231.73.25:80
1bfece60-b696-439b-ba0a-b7d28f77d3c4-6.exe (Sense by Sense+)

TCP » 54.231.73.25:80
kns2b93.tmp

TCP » 54.231.73.25:80
712fa747-8c34-4dfa-9585-86e3cc876a8d-6.exe (Sense by Sense+)

TCP » 54.231.73.25:80
506a739b-12de-484f-b322-e47a2073478e-6.exe (Ge-Force by Webar)

 
Latest 20 of 31 files

URL:
http://cdn.hosting-stats.com/

Network:
Amazon Web Services (AWS)

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.